Goose Attack Report

Users: 7

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-11-21 02:14:4425-11-21 02:14:5100:00:070 → 7
Maintaining25-11-21 02:14:5125-11-21 02:19:5100:05:007
Decreasing25-11-21 02:19:5125-11-21 02:20:3900:00:480 ← 7

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
DELETE delete_sbom_from_pool_sequential[100 SBOMs] 32 (-2) 0 2448.28 (+419.10) 618 (+129) 4952 (-9) 0.11 (-0.01) 0.00 (+0.00)
GET download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 14 (+4) 14 23.21 (+6.51) 2 (0) 88 (+27) 0.05 (+0.01) 0.05 (+0.01)
GET get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 14 (+4) 14 15.43 (-13.87) 1 (0) 56 (-87) 0.05 (+0.01) 0.05 (+0.01)
GET get_advisory_by_doc_id 15 (+5) 0 21.07 (+0.87) 5 (0) 92 (+29) 0.05 (+0.02) 0.00 (+0.00)
GET get_analysis_latest_cpe 11 (-4) 0 274.73 (-15.54) 133 (+11) 464 (+25) 0.04 (-0.01) 0.00 (+0.00)
GET get_analysis_status 11 (-4) 0 27.64 (+14.44) 2 (+1) 116 (+29) 0.04 (-0.01) 0.00 (+0.00)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 14 (+4) 0 691.43 (-75.67) 119 (-68) 1062 (-412) 0.05 (+0.01) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 15 (0) 0 1427.67 (-230.73) 412 (+173) 3633 (-234) 0.05 (+0.00) 0.00 (+0.00)
GET get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 15 (0) 0 61523.54 (-1141.66) 51579 (-3960) 70621 (-12086) 0.05 (+0.00) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 14 (+4) 0 8278.00 (+1602.60) 7197 (+4219) 11803 (-707) 0.05 (+0.01) 0.00 (+0.00)
GET list_advisory 14 (+4) 0 642.79 (+134.69) 309 (+125) 1039 (+244) 0.05 (+0.01) 0.00 (+0.00)
GET list_advisory_labels 15 (0) 0 13170.87 (+2855.73) 5502 (+118) 22295 (+1113) 0.05 (+0.00) 0.00 (+0.00)
GET list_advisory_paginated 15 (+5) 0 539.67 (+97.57) 218 (-7) 1011 (+430) 0.05 (+0.02) 0.00 (+0.00)
GET list_importer 11 (0) 0 6.00 (-6.82) 1 (0) 26 (-27) 0.04 (+0.00) 0.00 (+0.00)
GET list_organizations 14 (+4) 0 23.29 (+9.09) 2 (-1) 53 (+14) 0.05 (+0.01) 0.00 (+0.00)
GET list_packages 11 (0) 0 564.18 (+96.18) 252 (+87) 1672 (+663) 0.04 (+0.00) 0.00 (+0.00)
GET list_packages_paginated 11 (0) 0 490.73 (+135.18) 205 (+25) 1328 (+834) 0.04 (+0.00) 0.00 (+0.00)
GET list_products 11 (0) 0 18.09 (-24.45) 5 (+1) 69 (-62) 0.04 (+0.00) 0.00 (+0.00)
GET list_sboms 11 (0) 0 1301.27 (-755.09) 428 (+197) 3439 (-955) 0.04 (+0.00) 0.00 (+0.00)
GET list_sboms_paginated 11 (-4) 0 6140.00 (-2800.33) 1997 (+695) 11004 (-11580) 0.04 (-0.01) 0.00 (+0.00)
GET list_vulnerabilities 11 (0) 0 400.27 (-76.36) 112 (+9) 823 (-210) 0.04 (+0.00) 0.00 (+0.00)
GET list_vulnerabilities_paginated 11 (0) 0 283.36 (+30.27) 100 (+2) 679 (+79) 0.04 (+0.00) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 14 (+4) 0 71.71 (+27.41) 6 (-2) 194 (+40) 0.05 (+0.01) 0.00 (+0.00)
GET search_advisory 15 (+4) 0 1362.00 (-103.00) 302 (+15) 4506 (+115) 0.05 (+0.01) 0.00 (+0.00)
GET search_exact_purl 11 (0) 0 25.18 (-20.18) 5 (+3) 109 (-164) 0.04 (+0.00) 0.00 (+0.00)
GET search_licenses 1 (0) 0 146735.00 (+35580.00) 146735 (+35580) 146735 (+35580) 0.00 (+0.00) 0.00 (+0.00)
GET search_purls 11 (0) 0 9996.27 (-4103.73) 4618 (-2117) 17354 (-6346) 0.04 (+0.00) 0.00 (+0.00)
GET search_purls_by_license 1 (0) 0 110854.00 (-29170.00) 110854 (-29170) 110854 (-29170) 0.00 (+0.00) 0.00 (+0.00)
GET search_sboms_by_license 1 (0) 0 91706.00 (-162.00) 91706 (-162) 91706 (-162) 0.00 (+0.00) 0.00 (+0.00)
POST get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 14 (+4) 0 92.57 (+64.27) 8 (+3) 166 (+75) 0.05 (+0.01) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 14 (+4) 0 525.07 (-59.03) 160 (+26) 881 (-116) 0.05 (+0.01) 0.00 (+0.00)
Aggregated 383 (+36) 28 5112.81 (-574.81) 1 (0) 146735 (+6711) 1.28 (+0.12) 0.09 (+0.03)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
DELETE delete_sbom_from_pool_sequential[100 SBOMs] 2,000 (0) 3,000 (+1,000) 3,000 (+1,000) 4,000 (+1,000) 4,000 (0) 4,000 (0) 4,952 (-9) 4,952 (-9)
GET download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 5 (+1) 6 (-3) 28 (+19) 42 (+21) 83 (+31) 83 (+22) 88 (+27) 88 (+27)
GET get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 5 (-1) 6 (0) 18 (+7) 27 (+15) 54 (-56) 54 (-86) 56 (-84) 56 (-84)
GET get_advisory_by_doc_id 12 (-1) 12 (-2) 14 (-2) 17 (+1) 77 (+26) 77 (+14) 92 (+29) 92 (+29)
GET get_analysis_latest_cpe 290 (-10) 290 (-20) 310 (-20) 380 (+30) 420 (+40) 420 (+40) 460 (+21) 460 (+21)
GET get_analysis_status 7 (+1) 11 (+5) 51 (+45) 51 (+44) 52 (+12) 52 (+12) 116 (+29) 116 (+29)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 700 (+100) 700 (0) 800 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET get_sbom[sha256:720e4451…a939656247164447] 1,000 (0) 2,000 (0) 2,000 (0) 2,000 (-1,000) 3,000 (-867) 3,000 (-867) 3,633 (-234) 3,633 (-234)
GET get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 61,000 (0) 61,000 (0) 64,000 (+1,000) 65,000 (+2,000) 70,000 (-2,000) 70,000 (-2,000) 70,621 (-12,086) 70,621 (-12,086)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 8,000 (+1,000) 8,000 (+1,000) 8,000 (+1,000) 8,000 (+1,000) 9,000 (+1,000) 9,000 (-3,510) 11,803 (-707) 11,803 (-707)
GET list_advisory 600 (+110) 600 (+100) 800 (+200) 900 (+300) 900 (+200) 900 (+105) 1,000 (+205) 1,000 (+205)
GET list_advisory_labels 13,000 (+3,000) 13,000 (+3,000) 14,000 (+2,000) 14,000 (+2,000) 20,000 (+6,000) 20,000 (+6,000) 22,000 (+1,000) 22,000 (+1,000)
GET list_advisory_paginated 600 (+130) 600 (+110) 600 (+110) 600 (+110) 600 (+19) 600 (+19) 1,000 (+419) 1,000 (+419)
GET list_importer 3 (-1) 4 (-1) 5 (0) 6 (-12) 14 (-34) 14 (-34) 26 (-27) 26 (-27)
GET list_organizations 8 (+3) 23 (+15) 39 (+30) 43 (+12) 51 (+17) 51 (+12) 53 (+14) 53 (+14)
GET list_packages 420 (-40) 490 (0) 600 (+100) 600 (0) 600 (0) 600 (0) 1,672 (+672) 1,672 (+672)
GET list_packages_paginated 400 (+10) 400 (0) 500 (+90) 600 (+180) 600 (+160) 600 (+160) 1,000 (+510) 1,000 (+510)
GET list_products 8 (-45) 9 (-45) 10 (-46) 11 (-47) 61 (-11) 61 (-11) 69 (-61) 69 (-61)
GET list_sboms 1,000 (-1,000) 1,000 (-2,000) 1,000 (-2,000) 2,000 (-1,000) 3,000 (0) 3,000 (0) 3,000 (-1,000) 3,000 (-1,000)
GET list_sboms_paginated 6,000 (0) 6,000 (-1,000) 7,000 (-3,000) 9,000 (-9,000) 9,000 (-13,000) 9,000 (-13,000) 11,000 (-11,584) 11,000 (-11,584)
GET list_vulnerabilities 410 (-90) 410 (-90) 420 (-180) 470 (-130) 600 (0) 600 (0) 800 (-200) 800 (-200)
GET list_vulnerabilities_paginated 260 (+30) 270 (-20) 270 (-20) 290 (-20) 300 (-20) 300 (-20) 679 (+79) 679 (+79)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 64 (+44) 65 (+36) 69 (+16) 92 (+36) 160 (+77) 160 (+10) 190 (+40) 190 (+40)
GET search_advisory 1,000 (0) 1,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 4,506 (+506) 4,506 (+506)
GET search_exact_purl 9 (0) 10 (-1) 10 (-42) 30 (-31) 79 (+13) 79 (+13) 109 (-161) 109 (-161)
GET search_licenses 146,735 (+35,580) 146,735 (+35,580) 146,735 (+35,580) 146,735 (+35,580) 146,735 (+35,580) 146,735 (+35,580) 146,735 (+35,580) 146,735 (+35,580)
GET search_purls 10,000 (-4,000) 11,000 (-3,000) 11,000 (-4,000) 11,000 (-8,000) 14,000 (-6,000) 14,000 (-6,000) 17,000 (-6,700) 17,000 (-6,700)
GET search_purls_by_license 110,854 (-29,170) 110,854 (-29,170) 110,854 (-29,170) 110,854 (-29,170) 110,854 (-29,170) 110,854 (-29,170) 110,854 (-29,170) 110,854 (-29,170)
GET search_sboms_by_license 91,706 (-162) 91,706 (-162) 91,706 (-162) 91,706 (-162) 91,706 (-162) 91,706 (-162) 91,706 (-162) 91,706 (-162)
POST get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 89 (+77) 89 (+75) 110 (+90) 110 (+68) 160 (+91) 160 (+69) 166 (+75) 166 (+75)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 500 (0) 500 (-100) 700 (0) 700 (-100) 800 (-100) 800 (-197) 881 (-116) 881 (-116)
Aggregated 470 (-20) 700 (0) 1,000 (0) 3,000 (-1,000) 9,000 (-2,000) 20,000 (-36,000) 70,000 (-13,000) 146,735 (+6,735)

Status Code Metrics

Method Name Status Codes
DELETE delete_sbom_from_pool_sequential[100 SBOMs] 32 [200]
GET download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 14 [404]
GET get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 14 [404]
GET get_advisory_by_doc_id 15 [200]
GET get_analysis_latest_cpe 11 [200]
GET get_analysis_status 11 [200]
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 14 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 15 [200]
GET get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 15 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 14 [200]
GET list_advisory 14 [200]
GET list_advisory_labels 15 [200]
GET list_advisory_paginated 15 [200]
GET list_importer 11 [200]
GET list_organizations 14 [200]
GET list_packages 11 [200]
GET list_packages_paginated 11 [200]
GET list_products 11 [200]
GET list_sboms 11 [200]
GET list_sboms_paginated 11 [200]
GET list_vulnerabilities 11 [200]
GET list_vulnerabilities_paginated 11 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 14 [200]
GET search_advisory 15 [200]
GET search_exact_purl 11 [200]
GET search_licenses 1 [200]
GET search_purls 11 [200]
GET search_purls_by_license 1 [200]
GET search_sboms_by_license 1 [200]
POST get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 14 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 14 [200]
Aggregated 355 [200], 28 [404]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 14 (+4) 0 (0) 12.64 (+0.54) 7 (-1) 20 (+4) 0.05 (+0.01) 0.00 (+0.00)
1.1 list_organizations 14 (+4) 0 (0) 23.43 (+9.23) 2 (-1) 53 (+14) 0.05 (+0.01) 0.00 (+0.00)
1.2 list_advisory 14 (+4) 0 (0) 643.00 (+134.90) 309 (+125) 1039 (+244) 0.05 (+0.01) 0.00 (+0.00)
1.3 list_advisory_paginated 15 (+5) 0 (0) 539.67 (+97.57) 218 (-7) 1011 (+430) 0.05 (+0.02) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 15 (+5) 0 (0) 21.07 (+0.87) 5 (0) 92 (+29) 0.05 (+0.02) 0.00 (+0.00)
1.5 search_advisory 15 (+4) 0 (0) 1362.07 (-103.12) 302 (+15) 4506 (+115) 0.05 (+0.01) 0.00 (+0.00)
1.6 list_vulnerabilities 11 (0) 0 (0) 400.27 (-76.45) 112 (+9) 823 (-210) 0.04 (+0.00) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 11 (0) 0 (0) 283.36 (+30.27) 100 (+2) 679 (+79) 0.04 (+0.00) 0.00 (+0.00)
1.8 list_importer 11 (0) 0 (0) 6.00 (-7.00) 1 (0) 26 (-27) 0.04 (+0.00) 0.00 (+0.00)
1.9 list_packages 11 (0) 0 (0) 564.18 (+96.09) 252 (+87) 1672 (+663) 0.04 (+0.00) 0.00 (+0.00)
1.10 list_packages_paginated 11 (0) 0 (0) 490.73 (+135.09) 205 (+25) 1328 (+834) 0.04 (+0.00) 0.00 (+0.00)
1.11 search_purls 11 (0) 0 (0) 9996.27 (-4103.73) 4618 (-2117) 17354 (-6346) 0.04 (+0.00) 0.00 (+0.00)
1.12 search_exact_purl 11 (0) 0 (0) 25.18 (-20.27) 5 (+3) 109 (-164) 0.04 (+0.00) 0.00 (+0.00)
1.13 list_products 11 (0) 0 (0) 18.09 (-24.45) 5 (+1) 69 (-62) 0.04 (+0.00) 0.00 (+0.00)
1.14 list_sboms 11 (0) 0 (0) 1301.27 (-755.09) 428 (+197) 3439 (-955) 0.04 (+0.00) 0.00 (+0.00)
1.15 list_sboms_paginated 11 (-4) 0 (0) 6140.00 (-2800.40) 1997 (+695) 11004 (-11580) 0.04 (-0.01) 0.00 (+0.00)
1.16 get_analysis_status 11 (-4) 0 (0) 27.64 (+14.44) 2 (+1) 116 (+29) 0.04 (-0.01) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 11 (-4) 0 (0) 274.73 (-15.74) 133 (+11) 464 (+24) 0.04 (-0.01) 0.00 (+0.00)
1.18 list_advisory_labels 15 (0) 0 (0) 13170.93 (+2855.80) 5502 (+118) 22295 (+1113) 0.05 (+0.00) 0.00 (+0.00)
1.19 get_sbom[sha256:720e4451…a939656247164447] 15 (0) 0 (0) 1427.87 (-230.60) 412 (+173) 3634 (-233) 0.05 (+0.00) 0.00 (+0.00)
1.20 get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 15 (0) 0 (0) 61523.60 (-1141.73) 51579 (-3960) 70621 (-12086) 0.05 (+0.00) 0.00 (+0.00)
1.21 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 14 (+4) 0 (0) 71.79 (+27.49) 6 (-2) 195 (+41) 0.05 (+0.01) 0.00 (+0.00)
1.22 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 14 (+4) 0 (0) 8278.00 (+1602.50) 7197 (+4219) 11803 (-707) 0.05 (+0.01) 0.00 (+0.00)
1.23 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 14 (+4) 0 (0) 525.14 (-59.06) 160 (+26) 882 (-115) 0.05 (+0.01) 0.00 (+0.00)
1.24 get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 14 (+4) 0 (0) 691.57 (-75.53) 119 (-68) 1062 (-412) 0.05 (+0.01) 0.00 (+0.00)
1.25 get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 14 (+4) 0 (0) 92.57 (+64.27) 8 (+3) 166 (+75) 0.05 (+0.01) 0.00 (+0.00)
1.26 download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 14 (+4) 0 (0) 23.21 (+6.51) 2 (0) 88 (+27) 0.05 (+0.01) 0.00 (+0.00)
1.27 get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 14 (+4) 0 (0) 15.57 (-13.83) 1 (0) 57 (-87) 0.05 (+0.01) 0.00 (+0.00)
RestAPIUserSlow
2.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
2.1 search_licenses 1 (0) 0 (0) 146735.00 (+35580.00) 146735 (+35580) 146735 (+35580) 0.00 (+0.00) 0.00 (+0.00)
2.2 search_sboms_by_license 1 (0) 0 (0) 91706.00 (-162.00) 91706 (-162) 91706 (-162) 0.00 (+0.00) 0.00 (+0.00)
2.3 search_purls_by_license 1 (0) 0 (0) 110854.00 (-29170.00) 110854 (-29170) 110854 (-29170) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUserDelete
3.0 logon 31 (-2) 0 (0) 9.55 (-1.45) 6 (0) 18 (-2) 0.10 (-0.01) 0.00 (+0.00)
3.1 delete_sbom_from_pool_sequential[100 SBOMs] 32 (-2) 0 (0) 2448.50 (+419.09) 618 (+129) 4953 (-8) 0.11 (-0.01) 0.00 (+0.00)
Aggregated 428 (+38) 0 (0) 4575.25 (-485.28) 1 (0) 146735 (+6711) 1.43 (+0.13) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 14 (+4) 102473.00 (+3489.90) 86453 (-5882) 117146 (+7033) 0.05 (+0.01) 2.80 (+0.80)
RestAPIUserSlow 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUserDelete 1 (0) 31 (-2) 9557.19 (+486.92) 7710 (+880) 12515 (-191) 0.10 (-0.01) 31.00 (-2.00)
Aggregated 6 (0) 45 (+2) 38464.33 (+8484.10) 7710 (+880) 117146 (+7033) 0.15 (+0.01) 33.80 (-1.20)

User Metrics

Errors

# Error
14 (+4) 404 Not Found: download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89]
14 (+4) 404 Not Found: get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89]